feat: add HTTP transport option

Author: Shreda

.gitignore

@@ -1,3 +1,4 @@
 .claude/
+.claude-sessions/
 bin/
 .DS_Store

Dockerfile

@@ -21,5 +21,13 @@ FROM gcr.io/distroless/base-debian12
 WORKDIR /server
 # Copy the binary from the build stage
 COPY --from=build /bin/v1-mcp-server .
+
+# Transport configuration: stdio (default) or http
+ENV TRANSPORT=stdio
+# Address to listen on when using http transport (AgentCore expects port 8000)
+ENV ADDR=:8000
+# Expose port for http transport
+EXPOSE 8000
+
 # Command to run the server
 ENTRYPOINT ["./v1-mcp-server"]

README.md

@@ -13,10 +13,10 @@ This allows users to harness the power of Large Language Models (LLM) to interpr
 
 ## Security
 
-1. Your Trend Vision One API keys should be configured with minimial permissions.
+1. Your Trend Vision One API keys should be configured with minimal permissions.
 2. By default the MCP server runs in read-only mode. Be careful when running the server with `readonly=false` as it may have irreversible consequences.
 3. Data retrieved using the MCP server is processed by the LLM configured in your AI tooling. It is your responsibility to ensure that this LLM is approved by your company for processing sensitive data.
-4. This MCP server is only intended to be used with local integrations and command-line tools via the Standard Input/Output transport. You should never expose this tool to the network.
+4. When using HTTP transport, ensure the server is deployed behind appropriate authentication and network controls. The HTTP transport is intended for managed cloud deployments (e.g., AWS AgentCore) with proper security measures in place.
 
 ## Getting Started
 
@@ -80,11 +80,58 @@ Alternatively, copy the following into your `settings.json`.
 
 ### Server Options
 
-| Option | Description |
-| ------ | ----------- |
-| `-readonly` | Specify whether or not the server should run in readonly mode `readonly=true`, `readonly=false`. Default `true`. |
-| `-region` | Specify the Trend Vision One region. Regions are: `au`, `jp`, `eu`, `sg`, `in`, `us` or `mea`. |
-| `-host` | Set the Trend Vision One endpoint you want to use. Useful for interacting with internal environments. |
+| Option | Environment Variable | Description |
+| ------ | -------------------- | ----------- |
+| `-readonly` | | Specify whether or not the server should run in readonly mode `readonly=true`, `readonly=false`. Default `true`. |
+| `-region` | | Specify the Trend Vision One region. Regions are: `au`, `jp`, `eu`, `sg`, `in`, `us` or `mea`. |
+| `-host` | | Set the Trend Vision One endpoint you want to use. Useful for interacting with internal environments. |
+| `-transport` | `TRANSPORT` | Transport type: `stdio` or `http`. Default `stdio`. |
+| `-addr` | `ADDR` | Address to listen on when using HTTP transport. Default `:8000`. |
+
+### Transport Modes
+
+The MCP server supports two transport modes:
+
+#### Standard I/O (stdio) - Default
+
+Used for local integrations with Claude Desktop, VSCode, and other MCP clients that communicate via stdin/stdout.
+
+```bash
+./v1-mcp-server -region us
+```
+
+#### HTTP (Streamable HTTP)
+
+Used for remote deployments such as AWS Bedrock AgentCore. The server exposes a `/mcp` endpoint for MCP communication using the streamable HTTP transport.
+
+```bash
+./v1-mcp-server -region us -transport http -addr :8000
+```
+
+Or using environment variables (recommended for containerized deployments):
+
+```bash
+TRANSPORT=http ADDR=:8000 ./v1-mcp-server -region us
+```
+
+**Docker with HTTP transport:**
+
+```bash
+docker run -p 8000:8000 \
+  -e TREND_VISION_ONE_API_KEY=your-api-key \
+  -e TRANSPORT=http \
+  ghcr.io/trendmicro/vision-one-mcp-server \
+  -region us
+```
+
+**Testing locally:**
+
+```bash
+# List available tools
+curl -X POST http://localhost:8000/mcp \
+  -H "Content-Type: application/json" \
+  -d '{"jsonrpc": "2.0", "id": 1, "method": "tools/list"}'
+```
 
 ## Tools
 

cmd/v1-mcp-server/main.go

@@ -24,6 +24,8 @@ func run() error {
 	v1Region := flag.String("region", "", "set the region of your vision one account.")
 	showVersion := flag.Bool("version", false, "print version information")
 	host := flag.String("host", "", "set the Trend Vision One endpoint you want to use. Only useful for interacting with internal environments.")
+	transport := flag.String("transport", getEnvOrDefault("TRANSPORT", "stdio"), "transport type: stdio or http")
+	addr := flag.String("addr", getEnvOrDefault("ADDR", ":8000"), "address to listen on when using http transport")
 
 	flag.Parse()
 
@@ -47,6 +49,10 @@ func run() error {
 		}
 	}
 
+	if *transport != "stdio" && *transport != "http" {
+		return fmt.Errorf("invalid transport %q, must be stdio or http", *transport)
+	}
+
 	version := getVersion()
 
 	serverCfg := v1mcp.ServerConfig{
@@ -57,6 +63,10 @@ func run() error {
 		Host:     *host,
 	}
 
+	if *transport == "http" {
+		return v1mcp.RunMcpHttpServer(serverCfg, *addr)
+	}
+
 	return v1mcp.RunMcpStdioServer(serverCfg)
 }
 
@@ -100,3 +110,10 @@ func getVersion() string {
 func printVersion() {
 	fmt.Fprintf(os.Stderr, "%s\n", getVersion())
 }
+
+func getEnvOrDefault(key, defaultValue string) string {
+	if value := os.Getenv(key); value != "" {
+		return value
+	}
+	return defaultValue
+}

internal/v1mcp/server.go

@@ -88,6 +88,41 @@ func RunMcpStdioServer(cfg ServerConfig) error {
 	return nil
 }
 
+func RunMcpHttpServer(cfg ServerConfig, addr string) error {
+	ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
+	defer stop()
+
+	s, err := NewMcpServer(cfg)
+	if err != nil {
+		return fmt.Errorf("error creating mcp server: %w", err)
+	}
+
+	// Use StreamableHTTPServer for AgentCore compatibility (POST /mcp endpoint)
+	httpServer := mcpserver.NewStreamableHTTPServer(s,
+		mcpserver.WithEndpointPath("/mcp"),
+		mcpserver.WithStateLess(true),
+	)
+
+	serverError := make(chan error)
+	go func() {
+		serverError <- httpServer.Start(addr)
+	}()
+
+	fmt.Fprintf(os.Stderr, "server listening on %s...\n", addr)
+
+	select {
+	case <-ctx.Done():
+		fmt.Fprintf(os.Stderr, "shutting down server...\n")
+		if err := httpServer.Shutdown(context.Background()); err != nil {
+			return fmt.Errorf("error shutting down server: %w", err)
+		}
+	case e := <-serverError:
+		return fmt.Errorf("server encountered error: %w", e)
+	}
+
+	return nil
+}
+
 func addReadOnlyToolset(
 	s *mcpserver.MCPServer,
 	client *v1client.V1ApiClient,